Last updated June 15, 2026
The terms that apply when EdgeOrigin processes personal data on your behalf as a processor.
This Data Processing Addendum ("DPA") forms part of the agreement between you (the "Controller") and EdgeOrigin (the "Processor") and applies where EdgeOrigin processes personal data on your behalf. Where data protection law treats you as a processor and us as a sub-processor, the same obligations apply down the chain.
EdgeOrigin provides real-time data and intelligence, delivered to you over an API and streaming interface. The data we collect and deliver comes from public, licensed, and commercial sources, not from your systems. This document concerns the limited personal information we process to operate our website, your account, and our commercial relationship.
Subject matter: provision of the EdgeOrigin data services. Duration: the term of the agreement. Nature and purpose: delivery of real-time data and intelligence, account administration, and support. Types of data and data subjects: as determined and controlled by you. We process personal data only on your documented instructions, including those set out in the agreement.
You authorize us to engage the subprocessors listed on our Subprocessors page. We impose data protection obligations on each subprocessor no less protective than those in this DPA and remain responsible for their performance. We will give notice of intended changes and you may object on reasonable data protection grounds.
We implement appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls on a least-privilege basis, and audit logging of access to our systems.
Taking into account the nature of the processing, we will assist you with appropriate measures to respond to requests from data subjects exercising their rights, and will forward any such request we receive directly to you.
We will notify you without undue delay after becoming aware of a personal data breach affecting your data, and provide information reasonably available to help you meet your notification obligations.
Where we transfer personal data across borders, we rely on a lawful transfer mechanism such as the Standard Contractual Clauses, which are incorporated by reference where applicable.
We will make available information necessary to demonstrate compliance with this DPA and allow for and contribute to audits, subject to reasonable confidentiality and security conditions.
On termination, we will delete or return personal data we process on your behalf, except where retention is required by law. Access to the data streams ends when your subscription ends, subject to any wind-down terms in your order.
To request a countersigned copy of this DPA or for any data protection question, email [email protected].
Questions about this policy? Email [email protected].